2 lines
2.8 KiB
JSON
2 lines
2.8 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","platforms":["Windows"],"product":"MSI Afterburner","vendor":"MSI","versions":[{"status":"affected","version":"4.6.6.16381 Beta 3"}]}],"source":"help@fluidattacks.com"},{"affectedData":[{"cpes":["cpe:2.3:a:msi:afterburner:4.6.6.16381_beta_3:*:*:*:*:*:*:*"],"defaultStatus":"affected","product":"afterburner","vendor":"msi","versions":[{"status":"affected","version":"4.6.6.16381_beta_3"}]}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"cveTags":[],"descriptions":[{"lang":"en","value":"MSI Afterburner v4.6.6.16381 Beta 3 is vulnerable to an ACL Bypass vulnerability in the RTCore64.sys driver, which leads to triggering vulnerabilities like CVE-2024-1443 and CVE-2024-1460 from a low privileged user."},{"lang":"es","value":"MSI Afterburner v4.6.6.16381 Beta 3 es vulnerable a una vulnerabilidad de derivación de ACL en el controlador RTCore64.sys, lo que provoca la activación de vulnerabilidades como CVE-2024-1443 y CVE-2024-1460 por parte de un usuario con pocos privilegios."}],"id":"CVE-2024-3745","lastModified":"2026-06-17T07:44:56.000","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":5.9,"source":"help@fluidattacks.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2024-3745","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2024-05-20T12:13:38.943347Z","version":"2.0.3"}}]},"published":"2024-05-18T13:15:49.997","references":[{"source":"help@fluidattacks.com","url":"https://fluidattacks.com/advisories/gershwin/"},{"source":"help@fluidattacks.com","url":"https://forums.guru3d.com/threads/msi-ab-rtss-development-news-thread.412822/page-227#post-6231456"},{"source":"help@fluidattacks.com","url":"https://forums.guru3d.com/threads/msi-ab-rtss-development-news-thread.412822/page-227#post-6231768"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://fluidattacks.com/advisories/gershwin/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://forums.guru3d.com/threads/msi-ab-rtss-development-news-thread.412822/page-227#post-6231456"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://forums.guru3d.com/threads/msi-ab-rtss-development-news-thread.412822/page-227#post-6231768"}],"sourceIdentifier":"help@fluidattacks.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-863"}],"source":"help@fluidattacks.com","type":"Secondary"}]}
|